Automatic configuration of Internet Explorer connections must be disallowed.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
DTBI305	DTBI305	DTBI305_rule		Medium

Description
This setting specifies to automatically detect the proxy server settings used to connect to the Internet and customize Internet Explorer. This setting specifies that Internet Explorer use the configuration settings provided in a file by the system administrator. If you enable this policy setting, the user will not be able to do automatic configuration. You can import current connection settings using Internet Explorer Maintenance under Admin Templates using group policy editor. If you disable or do not configure this policy setting, the user will have the freedom to automatically configure these settings.

Description

This setting specifies to automatically detect the proxy server settings used to connect to the Internet and customize Internet Explorer. This setting specifies that Internet Explorer use the configuration settings provided in a file by the system administrator. If you enable this policy setting, the user will not be able to do automatic configuration. You can import current connection settings using Internet Explorer Maintenance under Admin Templates using group policy editor. If you disable or do not configure this policy setting, the user will have the freedom to automatically configure these settings.

STIG	Date
Microsoft Internet Explorer 11 Security Technical Implementation Guide	2014-02-18

Details

Check Text ( C-DTBI305_chk )
The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> 'Disable changing Automatic Configuration settings' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel Criteria: If the value Autoconfig is REG_DWORD = 1 (Hex), this is not a finding.

Check Text ( C-DTBI305_chk )

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> 'Disable changing Automatic Configuration settings' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel Criteria: If the value Autoconfig is REG_DWORD = 1 (Hex), this is not a finding.

Fix Text (F-DTBI305_fix)
Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> 'Disable changing Automatic Configuration settings' to 'Enabled'.